Quite a number of Twitter users have been receiving messages asking, “This you???” These messages are accompanied by a short URL, which the recipient will inadvertently click on out of curiosity just to see if the link is really him or her. Little does the Twitter user know that clicking on the link leads one to a phishing website and by signing in, one gives away the log in ID and password of Twitter to an attacker who could then send similar messages to other Twitter users in the contact list of the first victim.
Having access to the log in ID and password of a twitter account would also mean that log in credentials of other websites could be compromised as well since most of us use the same credentials on a multitude of websites.
I wouldn’t say that this phishing attack is exceptionally malicious in nature since when one is directed to a phishing site, there is an option to log in or to close the browser. The worst kinds are those that steal your information as soon as you clicked on it.
Anyway, one cannot be too careful these days, even if the link or information comes from a trusted source and especially if we are not able to see the full URL of the link no thanks to URL shortening services!